easy-bank-mu[.]vercel[.]app

This domain, easy-bank-mu.vercel.app, is flagged as an active banking phishing threat targeting Easybank customers. Analysis indicates the site mimics the legitimate Easybank login portal, designed to harvest user credentials, financial details, and session tokens. The page title, 'Easybank landing page,' confirms the impersonation attempt. No specific drainer kit signatures have been identified, but the infrastructure aligns with common phishing-as-a-service frameworks. Infrastructure analysis reveals the following technical indicators: the domain was registered on February 22, 2026, through Tucows Domains Inc. and resolves to IP address 64.29.17.67, hosted on Amazon.com, Inc. (AS16509). The SSL certificate is issued by Google Trust Services (WR1). VirusTotal detection shows 19 out of 95 security vendors flagging the domain as malicious. The domain appears on one security blocklist, and its current status remains active despite partial mitigation efforts. As of the latest assessment, easy-bank-mu.vercel.app continues to operate, posing a high risk to users. Response actions include submission to security blocklists and browser-based warnings, but the domain remains accessible. Users are advised to avoid interacting with the site, verify SSL certificates independently, and report any suspicious login attempts to their financial institution. Organizations should update web filtering rules to block the domain and IP, and monitor for credential reuse attempts from affected accounts.